Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f71e5e2a-ac0e-3671-ad8a-78791afb4075.roa
File:                     f71e5e2a-ac0e-3671-ad8a-78791afb4075.roa (raw, json)
Hash identifier:          FFONaF0XVtBZ8sbb45L+tEUDyJqn8YHxLPw+FHuROa8=
Subject key identifier:   71:1C:EC:2B:96:A4:FA:FD:E1:53:61:AB:3F:05:04:17:B5:2D:D6:F6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F49838797BEF3930A21EB32C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f71e5e2a-ac0e-3671-ad8a-78791afb4075.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        99.196.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:87:97:be:f3:93:0a:21:eb:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5fd246aa-a80b-4dc3-ae80-60096cdce451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:80:e3:f9:6a:c3:77:76:31:bd:85:9c:c3:01:
                    7d:d5:fd:5f:77:f4:db:e6:38:18:6c:32:f3:a2:d9:
                    5f:ff:38:c5:da:c3:f6:39:6a:e9:e4:7a:8e:6c:88:
                    02:89:39:60:df:cf:6f:de:3e:56:d5:4e:23:db:8a:
                    b1:db:91:dd:f3:e5:16:08:3f:91:23:49:30:8d:cc:
                    7e:8d:90:ff:e1:1c:c5:78:20:81:66:eb:26:97:78:
                    63:4a:cd:99:35:e7:c0:35:d2:4d:c0:82:51:17:65:
                    3f:09:2f:b3:e0:07:b5:5f:ea:c1:cb:47:91:1c:4e:
                    64:62:ca:df:e2:96:51:d2:ed:a1:35:97:ed:05:e3:
                    48:e1:b7:6d:d3:d9:e5:97:ca:42:18:d8:fc:b5:b6:
                    2e:9f:7b:e4:bc:8e:92:30:cc:51:5d:b6:ed:aa:b5:
                    64:6d:05:63:79:d8:70:d3:f4:22:d9:42:18:c9:51:
                    63:28:66:f2:0a:34:51:b8:5f:2b:7b:aa:f2:03:72:
                    41:77:24:1e:2a:f9:24:dc:e2:1f:d5:72:c4:d1:26:
                    55:5c:3d:11:aa:6a:c8:f1:e6:55:d0:22:66:b9:a7:
                    96:37:d4:5f:e2:9d:bc:f5:b0:8f:21:ce:d4:02:82:
                    9c:13:9c:a2:3a:8f:e5:f3:4b:ce:b3:2e:62:b2:ac:
                    ae:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1C:EC:2B:96:A4:FA:FD:E1:53:61:AB:3F:05:04:17:B5:2D:D6:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f71e5e2a-ac0e-3671-ad8a-78791afb4075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:b0:cb:b5:92:6f:e7:31:26:76:96:bf:d6:58:18:06:53:f7:
         b9:20:ff:53:30:38:87:dd:c2:1d:55:c4:af:04:4e:6f:1f:85:
         02:4b:89:75:26:ae:58:25:fa:08:a5:79:03:0f:b4:60:bc:cd:
         b5:01:f3:a9:3a:a3:13:fc:ea:25:5a:92:04:54:64:77:3d:17:
         79:79:e9:8b:81:dd:8c:27:77:15:d0:62:a4:19:b1:b1:ea:cf:
         1f:d8:2b:c2:2e:cb:29:e4:99:65:bb:65:77:b2:65:6e:4c:50:
         6f:bb:3e:d2:fe:18:13:ce:e7:86:33:36:9c:ab:bf:04:b1:2c:
         49:a3:b8:a0:21:c6:a9:9f:90:71:74:12:00:74:bd:89:39:25:
         b7:b6:98:b7:7d:2a:98:9e:20:92:e0:88:1f:6a:df:b2:3c:c7:
         72:63:7c:6c:66:b8:88:a5:3f:b8:ed:a9:24:43:c2:2e:a2:65:
         cf:43:dd:c5:31:9a:69:2b:fd:68:15:31:a7:eb:b0:e9:66:91:
         68:e7:c0:f7:22:22:75:dc:75:79:2f:88:89:44:20:71:4f:9f:
         5e:a5:bf:56:1c:04:83:86:a5:bd:12:2c:ab:d0:1e:a4:09:15:
         60:4a:1d:34:17:ea:bd:af:5e:ee:28:fb:65:28:f6:cf:da:89:
         8b:f1:9d:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg4eXvvOTCiHrMsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NWZkMjQ2YWEtYTgwYi00ZGMzLWFlODAtNjAwOTZjZGNlNDUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIDj+WrDd3YxvYWcwwF91f1fd/Tb5jgYbDLz
otlf/zjF2sP2OWrp5HqObIgCiTlg389v3j5W1U4j24qx25Hd8+UWCD+RI0kwjcx+
jZD/4RzFeCCBZusml3hjSs2ZNefANdJNwIJRF2U/CS+z4Ae1X+rBy0eRHE5kYsrf
4pZR0u2hNZftBeNI4bdt09nll8pCGNj8tbYun3vkvI6SMMxRXbbtqrVkbQVjedhw
0/Qi2UIYyVFjKGbyCjRRuF8re6ryA3JBdyQeKvkk3OIf1XLE0SZVXD0RqmrI8eZV
0CJmuaeWN9Rf4p289bCPIc7UAoKcE5yiOo/l80vOsy5isqyuuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHEc7CuWpPr94VNhqz8FBBe1Ldb2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjcxZTVlMmEtYWMwZS0z
NjcxLWFkOGEtNzg3OTFhZmI0MDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8RoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAICwy7WSb+cxJnaWv9ZYGAZT97kg/1MwOIfdwh1VxK8ETm8fhQJLiXUm
rlgl+gileQMPtGC8zbUB86k6oxP86iVakgRUZHc9F3l56YuB3YwndxXQYqQZsbHq
zx/YK8IuyynkmWW7ZXeyZW5MUG+7PtL+GBPO54YzNpyrvwSxLEmjuKAhxqmfkHF0
EgB0vYk5Jbe2mLd9KpieIJLgiB9q37I8x3JjfGxmuIilP7jtqSRDwi6iZc9D3cUx
mmkr/WgVMafrsOlmkWjnwPciInXcdXkviIlEIHFPn16lv1YcBIOGpb0SLKvQHqQJ
FWBKHTQX6r2vXu4o+2Uo9s/aiYvxnX4=
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:54:57 2026 by rpki-client